SoK: A Systematic Review of TEE Usage for Developing Trusted Applications
arXiv:2306.15025 · doi:10.1145/3600160.3600169
Abstract
Trusted Execution Environments (TEEs) are a feature of modern central processing units (CPUs) that aim to provide a high assurance, isolated environment in which to run workloads that demand both confidentiality and integrity. Hardware and software components in the CPU isolate workloads, commonly referred to as Trusted Applications (TAs), from the main operating system (OS). This article aims to analyse the TEE ecosystem, determine its usability, and suggest improvements where necessary to make adoption easier. To better understand TEE usage, we gathered academic and practical examples from a total of 223 references. We summarise the literature and provide a publication timeline, along with insights into the evolution of TEE research and deployment. We categorise TAs into major groups and analyse the tools available to developers. Lastly, we evaluate trusted container projects, test performance, and identify the requirements for migrating applications inside them.
arXiv commentIn The 18th International Conference on Availability, Reliability and Security (ARES 2023), August 29 -- September 01, 2023, Benevento, Italy. 15 pages
References in corpus (16)
- DarkneTZ: Towards Model Privacy at the Edge using Trusted Execution Environments
- Occlum: Secure and Efficient Multitasking Inside a Single Enclave of Intel SGX
- Open-TEE - An Open Virtual Trusted Execution Environment
- LightBox: Full-stack Protected Stateful Middlebox at Lightning Speed
- Secure Content-Based Routing Using Intel Software Guard Extensions
- Twine: An Embedded Trusted Runtime for WebAssembly
- secureTF: A Secure TensorFlow Framework
- SoK: Hardware-supported Trusted Execution Environments
- CYCLOSA: Decentralizing Private Web Search Through SGX-Based Browser Extensions
- SafeKeeper: Protecting Web Passwords using Trusted Execution Environments
- StreamBox-TZ: Secure Stream Analytics at the Edge with TrustZone
- IceClave: A Trusted Execution Environment for In-Storage Computing
- Using Trusted Execution Environments for Secure Stream Processing of Medical Data
- TZ4Fabric: Executing Smart Contracts with ARM TrustZone
- PubSub-SGX: Exploiting Trusted Execution Environments for Privacy-Preserving Publish/Subscribe Systems
- Secure Cloud Storage with Client-Side Encryption Using a Trusted Execution Environment